🔥 This vulnerability is being actively exploited in the wild (CISA Known Exploited Vulnerabilities catalog)
CVE-2026-76461: Cisco Secure Email Gateway SQL Injection Vulnerability
Summary
Cisco Secure Email Gateway contains a SQL injection vulnerability (a type of attack where an attacker inserts malicious code into database queries) that allows an unauthenticated remote attacker to execute arbitrary commands with root privileges on the system. This vulnerability is currently being exploited in the wild. The deadline to address this issue is September 17, 2026.
Solution / Mitigation
Apply mitigations in accordance with vendor instructions from Cisco, ensuring compliance with CISA's BOD 26-04 Prioritizing Security Updates Based on Risk guidance. For cloud services, follow applicable BOD 26-04 guidance or discontinue use of the product if mitigations are unavailable. Stakeholders must evaluate each asset's internet exposure and ensure adherence to BOD 26-04 patching guidelines. See Cisco Security Advisory at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX for specific vendor instructions.
Vulnerability Details
EPSS: 0.0%
Yes
🔥 Actively Exploited
September 13, 2026
Classification
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-76461
First tracked: September 14, 2026 at 08:00 PM
Classified by LLM (prompt v3) · confidence: 95%